AltF Vault

Store 2FA recovery codes safely

Recovery codes are the spare keys to your accounts if you lose your phone. Paste each set into AltF Vault as a Recovery codes item: they are encrypted on your device, you can tick each code off as you use it, and the Health tab warns you when two or fewer are left.

  • Free, no account
  • Encrypted on your device
  • Works offline
  • Not yet independently audited
Checking this browser for a saved vault...

Rules for recovery codes

  • Save them the moment a site shows them. Most sites show them only once.
  • Keep them somewhere separate from your phone, because they are for when the phone is gone.
  • Each code works once. Mark it used straight away.
  • Generate a fresh set when you are down to two, and replace the old item.
  • Keep one offline copy too, such as a printout in a safe place, for your email and phone-number accounts.

Why not keep them in your authenticator app?

If the phone is lost, broken or reset, the authenticator and the codes go with it. A vault you can restore from an encrypted backup on another device removes that single point of failure.

Store 2FA recovery codes safely: questions and answers

Is it safe to store recovery codes with my passwords?

It is a trade-off. Anyone who opens the vault gets both factors, so protect the vault with a strong passphrase. For your most important accounts, a printed copy kept at home is a good second option.

How many codes can one item hold?

Up to 50, which covers every major service.

Does AltF Vault generate 2FA codes?

No. For time-based codes use AltF Authenticator, which is linked on this page and also runs on your device.

What if I already used most of my codes?

Sign in to the account, open its security settings and generate a new set. That cancels the old codes. Then edit the item in the vault.

Vault guides and features

AltF Vault homeThe vault, how it is built, what it cannot do and the FAQ.How the encryption worksThe full AltF Vault security design in plain English: PBKDF2-SHA-256 key derivation, AES-256-GCM, what is stored, and what it cannot protect against.Encrypted secure notesWrite encrypted notes in your browser: bank details, ID numbers, door codes and private lists, sealed with AES-256 on your device. Free and no sign-up.Password health checkFind weak, reused and years-old passwords in your vault, plus expired API keys and low recovery codes. Checked on your device, breach check optional.Encrypted backup and restoreDownload an encrypted backup of your AltF Vault, keep it in cloud storage or on a USB drive, and restore it on any device with your passphrase.Import passwords from CSVImport a password CSV from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password or LastPass into an encrypted vault. Read on your device, never uploaded.Offline password managerA free offline password manager that runs in your browser with no account or cloud. Encrypted on your device, works without internet after loading.Master passphrase guideHow to choose a master password for a password manager: random word passphrases, how many words you need, how to memorise it and what to avoid.How to choose a password managerA checklist for choosing a password manager: audits, encryption, recovery, sync, offline access, export and cost, with an honest look at where AltF Vault fits.

Free tools that work with the vault

AltFTool stores nothing from your vault. It is encrypted and kept in your browser; the only optional network request is the k-anonymity breach check.